This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VEDLGoXS2DqFQmpX-WvH5IPR4gY.roa File: VEDLGoXS2DqFQmpX-WvH5IPR4gY.roa (raw, json) Hash identifier: 7OfdSL5zflouGimQ2edhSwdtKH5OAl8xisB3gB1KhY8= Subject key identifier: 54:40:CB:1A:85:D2:D8:3A:85:42:6A:57:F9:6B:C7:E4:83:D1:E2:06 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019BBCD5FE0E5A57223408D6B355834BBB3C Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VEDLGoXS2DqFQmpX-WvH5IPR4gY.roa Signing time: Wed 14 Jan 2026 14:08:19 +0000 ROA not before: Wed 14 Jan 2026 14:08:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211507 IP address blocks: 2a06:5fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:d5:fe:0e:5a:57:22:34:08:d6:b3:55:83:4b:bb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 14 14:08:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5440cb1a85d2d83a85426a57f96bc7e483d1e206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:d1:be:c1:cc:48:5f:c0:e4:5f:be:10:b0: 65:52:3b:db:dd:94:a3:36:1d:05:bc:f8:1a:9c:f2: b2:2d:e5:28:39:66:94:ad:5c:7f:87:2c:4b:b1:d7: d0:25:45:65:a9:a7:2b:61:e9:fb:9c:16:36:7d:f1: 69:6f:b3:0a:33:4e:f7:ff:e5:8c:81:93:1d:7d:93: f5:7e:94:81:a4:38:50:8f:4e:be:c2:b4:0d:3b:f5: 3d:ae:8c:eb:b5:78:64:56:28:76:50:68:3f:59:00: 20:53:77:51:5b:47:75:a7:ae:94:fe:d2:e4:9e:f9: f5:12:00:d0:12:77:af:1a:e7:99:cd:2e:89:65:ac: 95:ad:ec:98:8b:0c:7d:6e:93:9c:da:c0:8c:b5:09: 33:cb:01:73:58:31:ad:25:85:71:53:bc:29:62:de: c8:b2:67:b0:2c:2f:73:5b:9b:3b:43:c4:a9:d5:f6: 86:b8:a4:1e:14:4e:55:5d:e7:e9:1c:95:02:d8:1b: 67:1a:68:e4:a6:06:b7:72:79:16:aa:cd:55:05:bc: c3:0d:10:e4:da:fe:65:5a:4c:55:1e:6d:ba:e9:3e: f0:14:a6:ee:d4:43:1c:47:6c:c2:49:a9:0b:95:dd: 82:81:51:2b:84:3c:e1:49:af:16:6f:29:3a:e5:5a: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:40:CB:1A:85:D2:D8:3A:85:42:6A:57:F9:6B:C7:E4:83:D1:E2:06 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VEDLGoXS2DqFQmpX-WvH5IPR4gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5fc0::/29 Signature Algorithm: sha256WithRSAEncryption 72:e5:98:d6:4f:40:42:f2:3d:9f:d2:b9:4b:9e:f9:1c:de:fe: e5:01:cc:c1:27:51:96:26:cc:ce:28:95:60:69:10:34:73:99: 98:0c:ee:5e:e1:79:f5:71:f1:10:ae:ac:0d:0c:e5:52:5a:77: 54:6e:35:54:e5:95:f2:de:14:e1:ac:2f:82:a0:cf:0a:9c:36: 4e:a4:e2:2c:f4:c7:f2:30:64:22:d5:62:7c:40:9a:b5:5f:2b: e4:21:db:ef:c9:ae:80:59:30:e8:a2:65:24:76:7c:cb:6e:9a: 61:5f:ae:45:f0:ed:6f:69:17:0f:69:a6:d1:f4:cd:b0:ed:6f: ab:c8:7a:c1:f7:82:06:24:ee:ea:50:df:fc:fe:b1:1a:2f:91: de:d6:a9:a3:f6:86:66:d1:d7:0d:4e:84:70:be:56:f3:f7:1b: ea:a2:c8:80:c2:bc:56:72:b0:50:62:c3:01:97:93:70:df:93: 6d:41:f8:71:68:82:c1:4f:c7:d9:06:8f:a1:35:57:03:0f:eb: 7e:ee:b7:e1:a1:05:07:7a:38:6b:b9:7d:7c:64:4c:f2:58:0e: 99:6b:1d:93:a5:f4:87:f6:04:61:84:28:2b:cd:85:e8:a4:2a: 7f:fa:83:94:12:cd:66:d1:15:08:ef:8f:76:ab:18:38:e7:29: 2c:f5:93:55 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZu81f4OWlciNAjWs1WDS7s8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTE0MTQwODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDQwY2IxYTg1ZDJkODNhODU0MjZhNTdmOTZiYzdlNDgzZDFlMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjRvsHMSF/A5F++ELBlUjvb3ZSj Nh0FvPganPKyLeUoOWaUrVx/hyxLsdfQJUVlqacrYen7nBY2ffFpb7MKM073/+WM gZMdfZP1fpSBpDhQj06+wrQNO/U9rozrtXhkVih2UGg/WQAgU3dRW0d1p66U/tLk nvn1EgDQEnevGueZzS6JZayVreyYiwx9bpOc2sCMtQkzywFzWDGtJYVxU7wpYt7I smewLC9zW5s7Q8Sp1faGuKQeFE5VXefpHJUC2BtnGmjkpga3cnkWqs1VBbzDDRDk 2v5lWkxVHm266T7wFKbu1EMcR2zCSakLld2CgVErhDzhSa8Wbyk65Vp2+QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFFRAyxqF0tg6hUJqV/lrx+SD0eIGMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvVkVETEdvWFMyRHFGUW1wWC1Xdkg1SVBSNGdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgZfwDAN BgkqhkiG9w0BAQsFAAOCAQEAcuWY1k9AQvI9n9K5S575HN7+5QHMwSdRlibMziiV YGkQNHOZmAzuXuF59XHxEK6sDQzlUlp3VG41VOWV8t4U4awvgqDPCpw2TqTiLPTH 8jBkItVifECatV8r5CHb78mugFkw6KJlJHZ8y26aYV+uRfDtb2kXD2mm0fTNsO1v q8h6wfeCBiTu6lDf/P6xGi+R3tapo/aGZtHXDU6EcL5W8/cb6qLIgMK8VnKwUGLD AZeTcN+TbUH4cWiCwU/H2QaPoTVXAw/rfu634aEFB3o4a7l9fGRM8lgOmWsdk6X0 h/YEYYQoK82F6KQqf/qDlBLNZtEVCO+PdqsYOOcpLPWTVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:06 2026 by rpki-client